diff --git a/verifiers/internal/vsa/verifier.go b/verifiers/internal/vsa/verifier.go index d03e3cf..301bb92 100644 --- a/verifiers/internal/vsa/verifier.go +++ b/verifiers/internal/vsa/verifier.go @@ -33,12 +33,10 @@ func VerifyVSA(ctx context.Context, if err != nil { return nil, nil, err } - fmt.Println(sigstoreStatement) vsa, err := vsa10.VSAFromStatement(sigstoreStatement) if err != nil { return nil, nil, err } - fmt.Println(vsa) // verify the envelope. signature err = verifyEnvelopeSignature(ctx, &sigstoreEnvelope) @@ -48,6 +46,12 @@ func VerifyVSA(ctx context.Context, // TODO: // verify the metadata + err = matchExpectedValues(vsa, vsaOpts) + if err != nil { + return nil, nil, err + } + + // TODO: // print the attestation return nil, nil, nil } @@ -78,3 +82,8 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeGa6ZCZn0q6WpaUwJrSk+PPYEsca } return nil } + +func matchExpectedValues(vsa *vsa10.VSA, vsaOpts *options.VSAOpts) error { + // TODO: implement this function + return nil +}